Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/14bc058d-bbc1-38e4-9f92-e5c58896cd41.roa
File:                     14bc058d-bbc1-38e4-9f92-e5c58896cd41.roa (raw, json)
Hash identifier:          KlUTUFmpVvIXVmXaufr/Ak8i9r+XCGhR1qqJ3xPZA38=
Subject key identifier:   44:46:B2:C3:79:4C:FF:16:F9:EC:BD:09:E2:2F:10:DD:8A:8A:22:D3
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F43285849FF7519D61332CFC0F6964B40
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/14bc058d-bbc1-38e4-9f92-e5c58896cd41.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        151.193.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:19:d6:13:32:cf:c0:f6:96:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=dc71bd95-f5bf-42c1-9a70-00cf84616d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:e0:a8:37:be:df:07:8e:e2:e1:01:b8:eb:
                    f4:45:7a:0d:86:95:34:59:87:58:03:5d:1a:e9:1b:
                    0e:ce:7b:63:b7:ce:e3:73:4a:91:40:69:0e:c2:03:
                    96:15:e0:b3:24:25:74:15:68:48:15:30:b0:14:ac:
                    fd:1a:f3:d3:a0:65:25:95:25:df:09:78:66:68:62:
                    be:86:91:ff:a3:c2:ea:d1:78:6c:e7:fe:c4:fc:4b:
                    ef:6b:dc:5a:50:ad:dc:3a:32:77:c4:a0:b2:98:38:
                    af:ff:82:1d:c3:19:2d:e8:d7:58:ff:3d:62:f4:0d:
                    f3:a8:5d:d0:2d:c7:13:74:ff:ad:b4:e4:f9:f6:42:
                    c0:e2:6f:d2:48:0d:75:ba:fc:83:2c:e8:db:d1:fb:
                    47:c0:4b:60:e6:e0:62:5a:c3:7f:2f:3c:41:72:0e:
                    4c:5a:31:2f:dc:2c:64:66:b0:e5:12:27:f4:4a:8a:
                    ba:da:f3:3e:20:0a:55:3b:c9:f5:6e:51:6e:0c:41:
                    3c:f4:60:df:92:b1:38:7e:45:1a:2b:c2:a3:ad:c0:
                    79:fc:81:04:c3:2f:80:68:29:0b:fa:c4:75:50:0e:
                    8d:b1:49:48:91:a6:8b:e9:6c:06:7e:44:01:40:d4:
                    8a:c2:bb:71:00:74:e4:d0:a8:51:42:6b:8c:2a:b5:
                    30:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:46:B2:C3:79:4C:FF:16:F9:EC:BD:09:E2:2F:10:DD:8A:8A:22:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/14bc058d-bbc1-38e4-9f92-e5c58896cd41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e1:5a:91:2e:05:4e:fc:58:82:d5:5c:ad:29:87:63:78:50:
         a3:1e:6b:93:56:4d:6d:92:6a:ca:09:71:29:bb:9e:b4:64:74:
         07:63:43:74:77:1f:69:cd:d5:95:94:fb:64:d9:23:9d:f9:d7:
         6e:73:82:4f:dd:58:1d:d0:14:34:81:f9:1f:ca:5b:96:97:0b:
         3e:a8:6e:a0:9e:1f:9f:01:5d:dd:19:a1:2d:53:46:34:f8:79:
         c4:c9:20:87:59:59:f3:ee:28:38:31:b2:f1:61:fc:f4:c9:b3:
         10:47:21:df:60:ef:59:39:10:92:96:28:e5:4e:28:a5:de:90:
         9a:07:bf:a7:d0:bb:c4:e2:7d:d5:6e:6e:e6:41:47:95:ca:d8:
         f8:c1:43:0f:09:9f:66:dc:37:b1:79:3b:73:a7:d3:87:25:a6:
         50:d2:45:8b:df:31:f0:d0:8f:74:e8:d1:75:8a:98:42:38:a8:
         ea:c0:d0:94:d7:24:88:25:d0:0c:5d:57:6b:c4:71:0a:46:3e:
         31:fa:24:a2:75:b0:26:55:f1:ae:84:0a:aa:78:75:35:77:d6:
         c4:b3:cc:dc:4c:e3:89:cd:06:9b:b8:1b:8a:40:76:35:17:73:
         b1:94:16:4a:04:3d:77:dd:61:fb:39:c3:4a:91:77:c2:d5:52:
         7a:74:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:54 2025 by rpki-client